Cloud Engineer, Security

Included Health is a healthcare company delivering integrated virtual care and navigation. The Cloud Engineer on the Security team will mature the company’s cloud security posture across primarily AWS and some GCP environments by designing, implementing, and automating controls that protect product infrastructure and prevent unauthorized PHI exfiltration. The role also partners with infrastructure, DevOps, engineering, and product teams on secure platform initiatives, incident response, and production-operable security practices.

Responsibilities:

• Design and automate cloud security controls across Identity & Access Management (IAM), authorization, Just-in-Time access, data access, and platform access
• Improve AWS and GCP security posture through Terraform guardrails, risk roadmaps, legacy remediation, and secure infrastructure patterns
• Build security tooling in Python, Go, and Lambda for vulnerability management, alerting, PHI logging, and cloud security workflows
• Secure containers, workloads, and CI/CD pipelines through practical controls teams can operate in production
• Partner with infrastructure, DevOps, engineering, and product teams on sensitive-data handling, incident response, and secure platform initiatives
• Document controls, standards, automation, and playbooks that help teams adopt secure workflows

Requirements:

• • 5+ years of hands-on cloud security experience, with deep AWS expertise and familiarity with GCP
• • Strong technical depth across cloud infrastructure, identity, authorization, networking, containers, CI/CD, logging, monitoring, and security operations
• • Experience building security automation and infrastructure tooling in Python, Go, Terraform, and cloud-native services
• • Experience designing and operating access controls, including RBAC, ABAC, policy-as-code, granular engineering access, and Just-in-Time access
• • Familiarity applying cloud security frameworks, HIPAA requirements, and related standards to production environments
• • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field